@glasstrace/sdk 1.3.2 → 1.3.3

package/dist/cli/validate.js

@@ -2,8 +2,8 @@ import {
   identityFingerprint,
   readMcpMarker,
   resolveEffectiveMcpCredential
-} from "../chunk-UFZEISZB.js";
-import "../chunk-MQHLWSIX.js";
+} from "../chunk-LQKJ27LO.js";
+import "../chunk-M4ZI7J3N.js";
 import "../chunk-NSBPE2FW.js";
 
 // src/cli/validate.ts

package/dist/edge-entry.cjs

@@ -14584,6 +14584,50 @@ var GlasstraceEnvVarsSchema = external_exports.object({
   NODE_ENV: external_exports.string().optional(),
   VERCEL_ENV: external_exports.string().optional()
 });
+var GLASSTRACE_ATTRIBUTE_NAMES = {
+  // Server-side attributes
+  TRACE_TYPE: "glasstrace.trace.type",
+  SESSION_ID: "glasstrace.session.id",
+  CORRELATION_ID: "glasstrace.correlation.id",
+  ENVIRONMENT: "glasstrace.environment",
+  ROUTE: "glasstrace.route",
+  HTTP_METHOD: "glasstrace.http.method",
+  HTTP_STATUS_CODE: "glasstrace.http.status_code",
+  HTTP_DURATION_MS: "glasstrace.http.duration_ms",
+  ERROR_MESSAGE: "glasstrace.error.message",
+  ERROR_CODE: "glasstrace.error.code",
+  ERROR_CATEGORY: "glasstrace.error.category",
+  ERROR_FIELD: "glasstrace.error.field",
+  ORM_PROVIDER: "glasstrace.orm.provider",
+  ORM_MODEL: "glasstrace.orm.model",
+  ORM_OPERATION: "glasstrace.orm.operation",
+  ORM_DURATION_MS: "glasstrace.orm.duration_ms",
+  FETCH_URL: "glasstrace.fetch.url",
+  FETCH_METHOD: "glasstrace.fetch.method",
+  FETCH_STATUS_CODE: "glasstrace.fetch.status_code",
+  FETCH_DURATION_MS: "glasstrace.fetch.duration_ms",
+  FETCH_TARGET: "glasstrace.fetch.target",
+  ENV_REFERENCED: "glasstrace.env.referenced",
+  BUILD_HASH: "glasstrace.build.hash",
+  SOURCE_FILE: "glasstrace.source.file",
+  SOURCE_LINE: "glasstrace.source.line",
+  SOURCE_MAPPED: "glasstrace.source.mapped",
+  TRPC_PROCEDURE: "glasstrace.trpc.procedure",
+  ERROR_RESPONSE_BODY: "glasstrace.error.response_body",
+  NEXT_ACTION_DETECTED: "glasstrace.next.action.detected",
+  // Client-side attributes
+  PLATFORM: "glasstrace.platform",
+  GESTURE_TYPE: "glasstrace.gesture.type",
+  TRIGGER_TYPE: "glasstrace.trigger.type",
+  ELEMENT_FINGERPRINT: "glasstrace.element.fingerprint",
+  ELEMENT_CONFIDENCE: "glasstrace.element.confidence",
+  TAB_ID: "glasstrace.tab.id"
+};
+var MAX_SOURCE_MAP_FILE_PATH_LENGTH = 512;
+var MAX_SOURCE_MAP_FILE_SIZE = 50 * 1024 * 1024;
+var MAX_SOURCE_MAP_FILE_COUNT = 100;
+var MAX_PRESIGNED_CLIENT_TOKEN_LENGTH = 2048;
+var MAX_PRESIGNED_PATHNAME_LENGTH = 1024;
 var ImportGraphPayloadSchema = external_exports.object({
   buildHash: BuildHashSchema,
   graph: external_exports.record(external_exports.string(), external_exports.array(external_exports.string()))
@@ -14630,35 +14674,68 @@ var PresignedUploadRequestSchema = external_exports.object({
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive()
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      )
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var PresignedUploadResponseSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   expiresAt: external_exports.number().int().nonnegative(),
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      clientToken: external_exports.string().min(1),
-      pathname: external_exports.string().min(1),
-      maxBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      clientToken: external_exports.string().min(1).max(
+        MAX_PRESIGNED_CLIENT_TOKEN_LENGTH,
+        `clientToken length exceeds maximum of ${MAX_PRESIGNED_CLIENT_TOKEN_LENGTH} characters`
+      ),
+      pathname: external_exports.string().min(1).max(
+        MAX_PRESIGNED_PATHNAME_LENGTH,
+        `pathname length exceeds maximum of ${MAX_PRESIGNED_PATHNAME_LENGTH} characters`
+      ),
+      maxBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `maxBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       /** Vercel Blob access mode — explicit in the contract per DISC-756. */
       access: external_exports.enum(["public"])
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestRequestSchema = external_exports.object({
   uploadId: external_exports.string().uuid(),
   buildHash: BuildHashSchema,
   files: external_exports.array(
     external_exports.object({
-      filePath: external_exports.string().min(1),
-      sizeBytes: external_exports.number().int().positive(),
+      filePath: external_exports.string().min(1).max(
+        MAX_SOURCE_MAP_FILE_PATH_LENGTH,
+        `filePath length exceeds maximum of ${MAX_SOURCE_MAP_FILE_PATH_LENGTH} characters`
+      ),
+      sizeBytes: external_exports.number().int().positive().max(
+        MAX_SOURCE_MAP_FILE_SIZE,
+        `sizeBytes exceeds maximum of ${MAX_SOURCE_MAP_FILE_SIZE} bytes (${MAX_SOURCE_MAP_FILE_SIZE / (1024 * 1024)} MiB)`
+      ),
       blobUrl: external_exports.string().url()
     })
-  ).min(1).max(100)
+  ).min(1).max(
+    MAX_SOURCE_MAP_FILE_COUNT,
+    `files array exceeds maximum of ${MAX_SOURCE_MAP_FILE_COUNT} entries`
+  )
 });
 var SourceMapManifestResponseSchema = external_exports.object({
   success: external_exports.literal(true),
@@ -14667,45 +14744,6 @@ var SourceMapManifestResponseSchema = external_exports.object({
   totalSizeBytes: external_exports.number().int().nonnegative(),
   activatedAt: external_exports.number().int().positive()
 });
-var GLASSTRACE_ATTRIBUTE_NAMES = {
-  // Server-side attributes
-  TRACE_TYPE: "glasstrace.trace.type",
-  SESSION_ID: "glasstrace.session.id",
-  CORRELATION_ID: "glasstrace.correlation.id",
-  ENVIRONMENT: "glasstrace.environment",
-  ROUTE: "glasstrace.route",
-  HTTP_METHOD: "glasstrace.http.method",
-  HTTP_STATUS_CODE: "glasstrace.http.status_code",
-  HTTP_DURATION_MS: "glasstrace.http.duration_ms",
-  ERROR_MESSAGE: "glasstrace.error.message",
-  ERROR_CODE: "glasstrace.error.code",
-  ERROR_CATEGORY: "glasstrace.error.category",
-  ERROR_FIELD: "glasstrace.error.field",
-  ORM_PROVIDER: "glasstrace.orm.provider",
-  ORM_MODEL: "glasstrace.orm.model",
-  ORM_OPERATION: "glasstrace.orm.operation",
-  ORM_DURATION_MS: "glasstrace.orm.duration_ms",
-  FETCH_URL: "glasstrace.fetch.url",
-  FETCH_METHOD: "glasstrace.fetch.method",
-  FETCH_STATUS_CODE: "glasstrace.fetch.status_code",
-  FETCH_DURATION_MS: "glasstrace.fetch.duration_ms",
-  FETCH_TARGET: "glasstrace.fetch.target",
-  ENV_REFERENCED: "glasstrace.env.referenced",
-  BUILD_HASH: "glasstrace.build.hash",
-  SOURCE_FILE: "glasstrace.source.file",
-  SOURCE_LINE: "glasstrace.source.line",
-  SOURCE_MAPPED: "glasstrace.source.mapped",
-  TRPC_PROCEDURE: "glasstrace.trpc.procedure",
-  ERROR_RESPONSE_BODY: "glasstrace.error.response_body",
-  NEXT_ACTION_DETECTED: "glasstrace.next.action.detected",
-  // Client-side attributes
-  PLATFORM: "glasstrace.platform",
-  GESTURE_TYPE: "glasstrace.gesture.type",
-  TRIGGER_TYPE: "glasstrace.trigger.type",
-  ELEMENT_FINGERPRINT: "glasstrace.element.fingerprint",
-  ELEMENT_CONFIDENCE: "glasstrace.element.confidence",
-  TAB_ID: "glasstrace.tab.id"
-};
 var K = new Uint32Array([
   1116352408,
   1899447441,